59234c
%define contentdir %{_datadir}/httpd
59234c
%define docroot /var/www
59234c
%define suexec_caller apache
59234c
%define mmn 20120211
59234c
%define mmnisa %{mmn}%{__isa_name}%{__isa_bits}
59234c
%define vstring %(source /etc/os-release; echo ${REDHAT_SUPPORT_PRODUCT})
59234c
%if 0%{?fedora} > 26 || 0%{?rhel} > 7
59234c
%global mpm event
59234c
%else
59234c
%global mpm prefork
59234c
%endif
59234c
59234c
Summary: Apache HTTP Server
59234c
Name: httpd
59234c
Version: 2.4.37
59234c
Release: 7%{?dist}
59234c
URL: https://httpd.apache.org/
59234c
Source0: https://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2
59234c
Source1: index.html
59234c
Source2: httpd.logrotate
59234c
Source3: instance.conf
59234c
Source4: httpd-ssl-pass-dialog
59234c
Source5: httpd.tmpfiles
59234c
Source6: httpd.service
59234c
Source7: action-graceful.sh
59234c
Source8: action-configtest.sh
59234c
Source10: httpd.conf
59234c
Source11: 00-base.conf
59234c
Source12: 00-mpm.conf
59234c
Source13: 00-lua.conf
59234c
Source14: 01-cgi.conf
59234c
Source15: 00-dav.conf
59234c
Source16: 00-proxy.conf
59234c
Source17: 00-ssl.conf
59234c
Source18: 01-ldap.conf
59234c
Source19: 00-proxyhtml.conf
59234c
Source20: userdir.conf
59234c
Source21: ssl.conf
59234c
Source22: welcome.conf
59234c
Source23: manual.conf
59234c
Source24: 00-systemd.conf
59234c
Source25: 01-session.conf
59234c
Source26: 10-listen443.conf
59234c
Source27: httpd.socket
59234c
Source28: 00-optional.conf
59234c
Source29: 01-md.conf
59234c
# Documentation
59234c
Source30: README.confd
59234c
Source31: README.confmod
59234c
Source32: httpd.service.xml
59234c
Source33: htcacheclean.service.xml
59234c
Source34: httpd.conf.xml
59234c
Source40: htcacheclean.service
59234c
Source41: htcacheclean.sysconf
59234c
Source42: httpd-init.service
59234c
Source43: httpd-ssl-gencerts
59234c
Source44: httpd@.service
59234c
59234c
# build/scripts patches
59234c
# http://bugzilla.redhat.com/show_bug.cgi?id=1231924
59234c
# http://bugzilla.redhat.com/show_bug.cgi?id=842736
59234c
# http://bugzilla.redhat.com/show_bug.cgi?id=1214401
59234c
Patch1: httpd-2.4.35-apachectl.patch
59234c
Patch2: httpd-2.4.28-apxs.patch
59234c
Patch3: httpd-2.4.35-deplibs.patch
59234c
Patch4: httpd-2.4.35-layout.patch
59234c
59234c
# Needed for socket activation and mod_systemd patch
59234c
Patch19: httpd-2.4.35-detect-systemd.patch
59234c
59234c
# Features/functional changes
59234c
Patch20: httpd-2.4.32-export.patch
59234c
Patch21: httpd-2.4.35-corelimit.patch
59234c
Patch22: httpd-2.4.35-selinux.patch
59234c
# https://bugzilla.redhat.com/show_bug.cgi?id=1170215
59234c
Patch23: httpd-2.4.28-icons.patch
59234c
Patch24: httpd-2.4.35-systemd.patch
59234c
Patch25: httpd-2.4.35-cachehardmax.patch
59234c
Patch26: httpd-2.4.28-socket-activation.patch
59234c
# https://bugzilla.redhat.com/show_bug.cgi?id=1109119
59234c
Patch27: httpd-2.4.35-sslciphdefault.patch
59234c
# https://bugzilla.redhat.com/show_bug.cgi?id=1332242
59234c
Patch28: httpd-2.4.28-statements-comment.patch
59234c
# https://bugzilla.redhat.com/show_bug.cgi?id=811714
59234c
Patch29: httpd-2.4.35-full-release.patch
59234c
Patch30: httpd-2.4.35-freebind.patch
59234c
Patch31: httpd-2.4.35-r1830819+.patch
59234c
# https://bugzilla.redhat.com/show_bug.cgi?id=1638738
59234c
Patch32: httpd-2.4.37-sslprotdefault.patch
59234c
59234c
# Bug fixes
59234c
# https://bugzilla.redhat.com/show_bug.cgi?id=1397243
59234c
Patch61: httpd-2.4.35-r1738878.patch
59234c
# https://bugzilla.redhat.com/show_bug.cgi?id=1170206
59234c
Patch62: httpd-2.4.35-r1633085.patch
59234c
# https://bugzilla.redhat.com/show_bug.cgi?id=1448892
59234c
Patch63: httpd-2.4.28-r1811831.patch
59234c
# https://bugzilla.redhat.com/show_bug.cgi?id=1602548
59234c
Patch65: httpd-2.4.35-r1842888.patch
59234c
# https://bugzilla.redhat.com/show_bug.cgi?id=1653009
59234c
Patch66: httpd-2.4.37-r1842929+.patch
59234c
# https://bugzilla.redhat.com/show_bug.cgi?id=1630432
59234c
Patch67: httpd-2.4.35-r1825120.patch
59234c
59234c
59234c
# Security fixes
59234c
# Patch200: securityissue.patch
59234c
59234c
License: ASL 2.0
59234c
Group: System Environment/Daemons
59234c
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
59234c
BuildRequires: autoconf, perl-interpreter, perl-generators, pkgconfig, findutils, xmlto
59234c
BuildRequires: zlib-devel, libselinux-devel, lua-devel,  brotli-devel
59234c
BuildRequires: apr-devel >= 1.5.0, apr-util-devel >= 1.5.0, pcre-devel >= 5.0
59234c
BuildRequires: systemd-devel
59234c
Requires: /etc/mime.types, system-logos-httpd
59234c
Obsoletes: httpd-suexec
59234c
Provides: webserver
59234c
Provides: mod_dav = %{version}-%{release}, httpd-suexec = %{version}-%{release}
59234c
Provides: httpd-mmn = %{mmn}, httpd-mmn = %{mmnisa}
59234c
Requires: httpd-tools = %{version}-%{release}
59234c
Requires: httpd-filesystem = %{version}-%{release}
59234c
Requires: mod_http2
59234c
Requires(pre): httpd-filesystem
59234c
Requires(preun): systemd-units
59234c
Requires(postun): systemd-units
59234c
Requires(post): systemd-units
59234c
Conflicts: apr < 1.5.0-1
59234c
59234c
%description
59234c
The Apache HTTP Server is a powerful, efficient, and extensible
59234c
web server.
59234c
59234c
%package devel
59234c
Group: Development/Libraries
59234c
Summary: Development interfaces for the Apache HTTP server
59234c
Requires: apr-devel, apr-util-devel, pkgconfig
59234c
Requires: httpd = %{version}-%{release}
59234c
59234c
%description devel
59234c
The httpd-devel package contains the APXS binary and other files
59234c
that you need to build Dynamic Shared Objects (DSOs) for the
59234c
Apache HTTP Server.
59234c
59234c
If you are installing the Apache HTTP server and you want to be
59234c
able to compile or develop additional modules for Apache, you need
59234c
to install this package.
59234c
59234c
%package manual
59234c
Group: Documentation
59234c
Summary: Documentation for the Apache HTTP server
59234c
Requires: httpd = %{version}-%{release}
59234c
Obsoletes: secureweb-manual, apache-manual
59234c
BuildArch: noarch
59234c
59234c
%description manual
59234c
The httpd-manual package contains the complete manual and
59234c
reference guide for the Apache HTTP server. The information can
59234c
also be found at http://httpd.apache.org/docs/2.2/.
59234c
59234c
%package filesystem
59234c
Group: System Environment/Daemons
59234c
Summary: The basic directory layout for the Apache HTTP server
59234c
BuildArch: noarch
59234c
Requires(pre): /usr/sbin/useradd
59234c
59234c
%description filesystem
59234c
The httpd-filesystem package contains the basic directory layout
59234c
for the Apache HTTP server including the correct permissions
59234c
for the directories.
59234c
59234c
%package tools
59234c
Group: System Environment/Daemons
59234c
Summary: Tools for use with the Apache HTTP Server
59234c
59234c
%description tools
59234c
The httpd-tools package contains tools which can be used with 
59234c
the Apache HTTP Server.
59234c
59234c
%package -n mod_ssl
59234c
Group: System Environment/Daemons
59234c
Summary: SSL/TLS module for the Apache HTTP Server
59234c
Epoch: 1
59234c
BuildRequires: openssl-devel
59234c
Requires(pre): httpd-filesystem
59234c
Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmnisa}
59234c
Requires: sscg >= 2.2.0
59234c
Obsoletes: stronghold-mod_ssl
59234c
# Require an OpenSSL which supports PROFILE=SYSTEM
59234c
Conflicts: openssl-libs < 1:1.0.1h-4
59234c
59234c
%description -n mod_ssl
59234c
The mod_ssl module provides strong cryptography for the Apache Web
59234c
server via the Secure Sockets Layer (SSL) and Transport Layer
59234c
Security (TLS) protocols.
59234c
59234c
%package -n mod_md
59234c
Group: System Environment/Daemons
59234c
Summary: Certificate provisioning using ACME for the Apache HTTP Server
59234c
Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmnisa}
59234c
BuildRequires: jansson-devel, libcurl-devel
59234c
59234c
%description -n mod_md
59234c
This module manages common properties of domains for one or more
59234c
virtual hosts. Specifically it can use the ACME protocol (RFC Draft)
59234c
to automate certificate provisioning. These will be configured for
59234c
managed domains and their virtual hosts automatically. This includes
59234c
renewal of certificates before they expire.
59234c
59234c
%package -n mod_proxy_html
59234c
Group: System Environment/Daemons
59234c
Summary: HTML and XML content filters for the Apache HTTP Server
59234c
Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmnisa}
59234c
BuildRequires: libxml2-devel
59234c
Epoch: 1
59234c
Obsoletes: mod_proxy_html < 1:2.4.1-2
59234c
59234c
%description -n mod_proxy_html
59234c
The mod_proxy_html and mod_xml2enc modules provide filters which can
59234c
transform and modify HTML and XML content.
59234c
59234c
%package -n mod_ldap
59234c
Group: System Environment/Daemons
59234c
Summary: LDAP authentication modules for the Apache HTTP Server
59234c
Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmnisa}
59234c
Requires: apr-util-ldap
59234c
59234c
%description -n mod_ldap
59234c
The mod_ldap and mod_authnz_ldap modules add support for LDAP
59234c
authentication to the Apache HTTP Server.
59234c
59234c
%package -n mod_session
59234c
Group: System Environment/Daemons
59234c
Summary: Session interface for the Apache HTTP Server
59234c
Requires: httpd = 0:%{version}-%{release}, httpd-mmn = %{mmnisa}
59234c
59234c
%description -n mod_session
59234c
The mod_session module and associated backends provide an abstract
59234c
interface for storing and accessing per-user session data.
59234c
59234c
%prep
59234c
%setup -q
59234c
%patch1 -p1 -b .apctl
59234c
%patch2 -p1 -b .apxs
59234c
%patch3 -p1 -b .deplibs
59234c
%patch4 -p1 -b .layout
59234c
59234c
%patch19 -p1 -b .detectsystemd
59234c
%patch20 -p1 -b .export
59234c
%patch21 -p1 -b .corelimit
59234c
%patch22 -p1 -b .selinux
59234c
%patch23 -p1 -b .icons
59234c
%patch24 -p1 -b .systemd
59234c
%patch25 -p1 -b .cachehardmax
59234c
%patch26 -p1 -b .socketactivation
59234c
%patch27 -p1 -b .sslciphdefault
59234c
%patch28 -p1 -b .statementscomment
59234c
%patch29 -p1 -b .fullrelease
59234c
%patch30 -p1 -b .freebind
59234c
%patch31 -p1 -b .r1830819+
59234c
%patch32 -p1 -b .sslprotdefault
59234c
59234c
%patch61 -p1 -b .r1738878
59234c
%patch62 -p1 -b .r1633085
59234c
%patch63 -p1 -b .r1811831
59234c
%patch65 -p1 -b .r1842888
59234c
%patch66 -p1 -b .r1842929+
59234c
%patch67 -p1 -b .r1825120
59234c
59234c
# Patch in the vendor string
59234c
sed -i '/^#define PLATFORM/s/Unix/%{vstring}/' os/unix/os.h
59234c
sed -i 's/@RELEASE@/%{release}/' server/core.c
59234c
59234c
# Prevent use of setcap in "install-suexec-caps" target.
59234c
sed -i '/suexec/s,setcap ,echo Skipping setcap for ,' Makefile.in
59234c
59234c
# Example conf for instances
59234c
cp $RPM_SOURCE_DIR/instance.conf .
59234c
sed < $RPM_SOURCE_DIR/httpd.conf >> instance.conf '
59234c
0,/^ServerRoot/d;
59234c
/# Supplemental configuration/,$d
59234c
/^ *CustomLog .logs/s,logs/,logs/${HTTPD_INSTANCE}_,
59234c
/^ *ErrorLog .logs/s,logs/,logs/${HTTPD_INSTANCE}_,
59234c
'
59234c
touch -r $RPM_SOURCE_DIR/instance.conf instance.conf
59234c
59234c
# Safety check: prevent build if defined MMN does not equal upstream MMN.
59234c
vmmn=`echo MODULE_MAGIC_NUMBER_MAJOR | cpp -include include/ap_mmn.h | sed -n '/^2/p'`
59234c
if test "x${vmmn}" != "x%{mmn}"; then
59234c
   : Error: Upstream MMN is now ${vmmn}, packaged MMN is %{mmn}
59234c
   : Update the mmn macro and rebuild.
59234c
   exit 1
59234c
fi
59234c
59234c
sed '
59234c
s,@MPM@,%{mpm},g
59234c
s,@DOCROOT@,%{docroot},g
59234c
s,@LOGDIR@,%{_localstatedir}/log/httpd,g
59234c
' < $RPM_SOURCE_DIR/httpd.conf.xml \
59234c
    > httpd.conf.xml
59234c
59234c
xmlto man ./httpd.conf.xml
59234c
xmlto man $RPM_SOURCE_DIR/htcacheclean.service.xml
59234c
xmlto man $RPM_SOURCE_DIR/httpd.service.xml
59234c
59234c
: Building with MMN %{mmn}, MMN-ISA %{mmnisa}
59234c
: Default MPM is %{mpm}, vendor string is '%{vstring}'
59234c
59234c
%build
59234c
# forcibly prevent use of bundled apr, apr-util, pcre
59234c
rm -rf srclib/{apr,apr-util,pcre}
59234c
59234c
# regenerate configure scripts
59234c
autoheader && autoconf || exit 1
59234c
59234c
# Before configure; fix location of build dir in generated apxs
59234c
%{__perl} -pi -e "s:\@exp_installbuilddir\@:%{_libdir}/httpd/build:g" \
59234c
	support/apxs.in
59234c
59234c
export CFLAGS=$RPM_OPT_FLAGS
59234c
export LDFLAGS="-Wl,-z,relro,-z,now"
59234c
59234c
# Hard-code path to links to avoid unnecessary builddep
59234c
export LYNX_PATH=/usr/bin/links
59234c
59234c
# Build the daemon
59234c
./configure \
59234c
        --prefix=%{_sysconfdir}/httpd \
59234c
        --exec-prefix=%{_prefix} \
59234c
        --bindir=%{_bindir} \
59234c
        --sbindir=%{_sbindir} \
59234c
        --mandir=%{_mandir} \
59234c
        --libdir=%{_libdir} \
59234c
        --sysconfdir=%{_sysconfdir}/httpd/conf \
59234c
        --includedir=%{_includedir}/httpd \
59234c
        --libexecdir=%{_libdir}/httpd/modules \
59234c
        --datadir=%{contentdir} \
59234c
        --enable-layout=Fedora \
59234c
        --with-installbuilddir=%{_libdir}/httpd/build \
59234c
        --enable-mpms-shared=all \
59234c
        --with-apr=%{_prefix} --with-apr-util=%{_prefix} \
59234c
        --enable-suexec --with-suexec \
59234c
        --enable-suexec-capabilities \
59234c
        --with-suexec-caller=%{suexec_caller} \
59234c
        --with-suexec-docroot=%{docroot} \
59234c
        --without-suexec-logfile \
59234c
        --with-suexec-syslog \
59234c
        --with-suexec-bin=%{_sbindir}/suexec \
59234c
        --with-suexec-uidmin=1000 --with-suexec-gidmin=1000 \
59234c
        --with-brotli \
59234c
        --enable-pie \
59234c
        --with-pcre \
59234c
        --enable-mods-shared=all \
59234c
        --enable-ssl --with-ssl --disable-distcache \
59234c
        --enable-proxy --enable-proxy-fdpass \
59234c
        --enable-cache \
59234c
        --enable-disk-cache \
59234c
        --enable-ldap --enable-authnz-ldap \
59234c
        --enable-cgid --enable-cgi \
59234c
        --enable-authn-anon --enable-authn-alias \
59234c
        --disable-imagemap --disable-file-cache \
59234c
        --disable-http2 \
59234c
        $*
59234c
make %{?_smp_mflags}
59234c
59234c
%install
59234c
rm -rf $RPM_BUILD_ROOT
59234c
59234c
make DESTDIR=$RPM_BUILD_ROOT install
59234c
59234c
# Install systemd service files
59234c
mkdir -p $RPM_BUILD_ROOT%{_unitdir}
59234c
for s in httpd.service htcacheclean.service httpd.socket \
59234c
         httpd@.service httpd-init.service; do
59234c
  install -p -m 644 $RPM_SOURCE_DIR/${s} \
59234c
                    $RPM_BUILD_ROOT%{_unitdir}/${s}
59234c
done
59234c
59234c
# install conf file/directory
59234c
mkdir $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d \
59234c
      $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.modules.d
59234c
install -m 644 $RPM_SOURCE_DIR/README.confd \
59234c
    $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d/README
59234c
install -m 644 $RPM_SOURCE_DIR/README.confmod \
59234c
    $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.modules.d/README
59234c
for f in 00-base.conf 00-mpm.conf 00-lua.conf 01-cgi.conf 00-dav.conf \
59234c
         00-proxy.conf 00-ssl.conf 01-ldap.conf 00-proxyhtml.conf \
59234c
         01-ldap.conf 00-systemd.conf 01-session.conf 00-optional.conf \
59234c
         01-md.conf; do
59234c
  install -m 644 -p $RPM_SOURCE_DIR/$f \
59234c
        $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.modules.d/$f
59234c
done
59234c
59234c
sed -i '/^#LoadModule mpm_%{mpm}_module /s/^#//' \
59234c
     $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.modules.d/00-mpm.conf
59234c
touch -r $RPM_SOURCE_DIR/00-mpm.conf \
59234c
     $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.modules.d/00-mpm.conf
59234c
59234c
# install systemd override drop directory
59234c
# Web application packages can drop snippets into this location if
59234c
# they need ExecStart[pre|post].
59234c
mkdir $RPM_BUILD_ROOT%{_unitdir}/httpd.service.d
59234c
mkdir $RPM_BUILD_ROOT%{_unitdir}/httpd.socket.d
59234c
59234c
install -m 644 -p $RPM_SOURCE_DIR/10-listen443.conf \
59234c
      $RPM_BUILD_ROOT%{_unitdir}/httpd.socket.d/10-listen443.conf
59234c
59234c
for f in welcome.conf ssl.conf manual.conf userdir.conf; do
59234c
  install -m 644 -p $RPM_SOURCE_DIR/$f \
59234c
        $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d/$f
59234c
done
59234c
59234c
# Split-out extra config shipped as default in conf.d:
59234c
for f in autoindex; do
59234c
  install -m 644 docs/conf/extra/httpd-${f}.conf \
59234c
        $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.d/${f}.conf
59234c
done
59234c
59234c
# Extra config trimmed:
59234c
rm -v docs/conf/extra/httpd-{ssl,userdir}.conf
59234c
59234c
rm $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf/*.conf
59234c
install -m 644 -p $RPM_SOURCE_DIR/httpd.conf \
59234c
   $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf/httpd.conf
59234c
59234c
mkdir $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig
59234c
install -m 644 -p $RPM_SOURCE_DIR/htcacheclean.sysconf \
59234c
   $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/htcacheclean
59234c
59234c
# tmpfiles.d configuration
59234c
mkdir -p $RPM_BUILD_ROOT%{_prefix}/lib/tmpfiles.d 
59234c
install -m 644 -p $RPM_SOURCE_DIR/httpd.tmpfiles \
59234c
   $RPM_BUILD_ROOT%{_prefix}/lib/tmpfiles.d/httpd.conf
59234c
59234c
# Other directories
59234c
mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/lib/dav \
59234c
         $RPM_BUILD_ROOT%{_localstatedir}/lib/httpd \
59234c
         $RPM_BUILD_ROOT/run/httpd/htcacheclean
59234c
59234c
# Substitute in defaults which are usually done (badly) by "make install"
59234c
sed -i \
59234c
   "s,@@ServerRoot@@/var,%{_localstatedir}/lib/dav,;
59234c
    s,@@ServerRoot@@/user.passwd,/etc/httpd/conf/user.passwd,;
59234c
    s,@@ServerRoot@@/docs,%{docroot},;
59234c
    s,@@ServerRoot@@,%{docroot},;
59234c
    s,@@Port@@,80,;" \
59234c
    docs/conf/extra/*.conf
59234c
59234c
# Create cache directory
59234c
mkdir -p $RPM_BUILD_ROOT%{_localstatedir}/cache/httpd \
59234c
         $RPM_BUILD_ROOT%{_localstatedir}/cache/httpd/proxy \
59234c
         $RPM_BUILD_ROOT%{_localstatedir}/cache/httpd/ssl
59234c
59234c
# Make the MMN accessible to module packages
59234c
echo %{mmnisa} > $RPM_BUILD_ROOT%{_includedir}/httpd/.mmn
59234c
mkdir -p $RPM_BUILD_ROOT%{_rpmconfigdir}/macros.d
59234c
cat > $RPM_BUILD_ROOT%{_rpmconfigdir}/macros.d/macros.httpd <
59234c
%%_httpd_mmn %{mmnisa}
59234c
%%_httpd_apxs %%{_bindir}/apxs
59234c
%%_httpd_modconfdir %%{_sysconfdir}/httpd/conf.modules.d
59234c
%%_httpd_confdir %%{_sysconfdir}/httpd/conf.d
59234c
%%_httpd_contentdir %{contentdir}
59234c
%%_httpd_moddir %%{_libdir}/httpd/modules
59234c
EOF
59234c
59234c
# Handle contentdir
59234c
mkdir $RPM_BUILD_ROOT%{contentdir}/noindex
59234c
install -m 644 -p $RPM_SOURCE_DIR/index.html \
59234c
        $RPM_BUILD_ROOT%{contentdir}/noindex/index.html
59234c
rm -rf %{contentdir}/htdocs
59234c
59234c
# remove manual sources
59234c
find $RPM_BUILD_ROOT%{contentdir}/manual \( \
59234c
    -name \*.xml -o -name \*.xml.* -o -name \*.ent -o -name \*.xsl -o -name \*.dtd \
59234c
    \) -print0 | xargs -0 rm -f
59234c
59234c
# Strip the manual down just to English and replace the typemaps with flat files:
59234c
set +x
59234c
for f in `find $RPM_BUILD_ROOT%{contentdir}/manual -name \*.html -type f`; do
59234c
   if test -f ${f}.en; then
59234c
      cp ${f}.en ${f}
59234c
      rm ${f}.*
59234c
   fi
59234c
done
59234c
set -x
59234c
59234c
# Clean Document Root
59234c
rm -v $RPM_BUILD_ROOT%{docroot}/html/*.html \
59234c
      $RPM_BUILD_ROOT%{docroot}/cgi-bin/*
59234c
59234c
# Symlink for the powered-by-$DISTRO image:
59234c
ln -s ../../pixmaps/poweredby.png \
59234c
        $RPM_BUILD_ROOT%{contentdir}/icons/poweredby.png
59234c
59234c
# symlinks for /etc/httpd
59234c
ln -s ../..%{_localstatedir}/log/httpd $RPM_BUILD_ROOT/etc/httpd/logs
59234c
ln -s ../..%{_localstatedir}/lib/httpd $RPM_BUILD_ROOT/etc/httpd/state
59234c
ln -s /run/httpd $RPM_BUILD_ROOT/etc/httpd/run
59234c
ln -s ../..%{_libdir}/httpd/modules $RPM_BUILD_ROOT/etc/httpd/modules
59234c
59234c
# install http-ssl-pass-dialog
59234c
mkdir -p $RPM_BUILD_ROOT%{_libexecdir}
59234c
install -m755 $RPM_SOURCE_DIR/httpd-ssl-pass-dialog \
59234c
	$RPM_BUILD_ROOT%{_libexecdir}/httpd-ssl-pass-dialog
59234c
59234c
# install http-ssl-gencerts
59234c
install -m755 $RPM_SOURCE_DIR/httpd-ssl-gencerts \
59234c
	$RPM_BUILD_ROOT%{_libexecdir}/httpd-ssl-gencerts
59234c
59234c
# Install action scripts
59234c
mkdir -p $RPM_BUILD_ROOT%{_libexecdir}/initscripts/legacy-actions/httpd
59234c
for f in graceful configtest; do
59234c
    install -p -m 755 $RPM_SOURCE_DIR/action-${f}.sh \
59234c
            $RPM_BUILD_ROOT%{_libexecdir}/initscripts/legacy-actions/httpd/${f}
59234c
done
59234c
59234c
# Install logrotate config
59234c
mkdir -p $RPM_BUILD_ROOT/etc/logrotate.d
59234c
install -m 644 -p $RPM_SOURCE_DIR/httpd.logrotate \
59234c
	$RPM_BUILD_ROOT/etc/logrotate.d/httpd
59234c
59234c
# Install man pages
59234c
install -d $RPM_BUILD_ROOT%{_mandir}/man8 $RPM_BUILD_ROOT%{_mandir}/man5
59234c
install -m 644 -p httpd.service.8 httpd-init.service.8 httpd.socket.8 \
59234c
        httpd@.service.8  htcacheclean.service.8 \
59234c
        $RPM_BUILD_ROOT%{_mandir}/man8
59234c
install -m 644 -p httpd.conf.5 \
59234c
        $RPM_BUILD_ROOT%{_mandir}/man5
59234c
59234c
# fix man page paths
59234c
sed -e "s|/usr/local/apache2/conf/httpd.conf|/etc/httpd/conf/httpd.conf|" \
59234c
    -e "s|/usr/local/apache2/conf/mime.types|/etc/mime.types|" \
59234c
    -e "s|/usr/local/apache2/conf/magic|/etc/httpd/conf/magic|" \
59234c
    -e "s|/usr/local/apache2/logs/error_log|/var/log/httpd/error_log|" \
59234c
    -e "s|/usr/local/apache2/logs/access_log|/var/log/httpd/access_log|" \
59234c
    -e "s|/usr/local/apache2/logs/httpd.pid|/run/httpd/httpd.pid|" \
59234c
    -e "s|/usr/local/apache2|/etc/httpd|" < docs/man/httpd.8 \
59234c
  > $RPM_BUILD_ROOT%{_mandir}/man8/httpd.8
59234c
59234c
# Make ap_config_layout.h libdir-agnostic
59234c
sed -i '/.*DEFAULT_..._LIBEXECDIR/d;/DEFAULT_..._INSTALLBUILDDIR/d' \
59234c
    $RPM_BUILD_ROOT%{_includedir}/httpd/ap_config_layout.h
59234c
59234c
# Fix path to instdso in special.mk
59234c
sed -i '/instdso/s,top_srcdir,top_builddir,' \
59234c
    $RPM_BUILD_ROOT%{_libdir}/httpd/build/special.mk
59234c
59234c
# Remove unpackaged files
59234c
rm -vf \
59234c
      $RPM_BUILD_ROOT%{_libdir}/*.exp \
59234c
      $RPM_BUILD_ROOT/etc/httpd/conf/mime.types \
59234c
      $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.exp \
59234c
      $RPM_BUILD_ROOT%{_libdir}/httpd/build/config.nice \
59234c
      $RPM_BUILD_ROOT%{_bindir}/{ap?-config,dbmmanage} \
59234c
      $RPM_BUILD_ROOT%{_sbindir}/{checkgid,envvars*} \
59234c
      $RPM_BUILD_ROOT%{contentdir}/htdocs/* \
59234c
      $RPM_BUILD_ROOT%{_mandir}/man1/dbmmanage.* \
59234c
      $RPM_BUILD_ROOT%{contentdir}/cgi-bin/*
59234c
59234c
rm -rf $RPM_BUILD_ROOT/etc/httpd/conf/{original,extra}
59234c
59234c
%pre filesystem
59234c
getent group apache >/dev/null || groupadd -g 48 -r apache
59234c
getent passwd apache >/dev/null || \
59234c
  useradd -r -u 48 -g apache -s /sbin/nologin \
59234c
    -d %{contentdir} -c "Apache" apache
59234c
exit 0
59234c
59234c
%post
59234c
%systemd_post httpd.service htcacheclean.service httpd.socket
59234c
59234c
%preun
59234c
%systemd_preun httpd.service htcacheclean.service httpd.socket
59234c
59234c
%postun
59234c
%systemd_postun
59234c
59234c
# Trigger for conversion from SysV, per guidelines at:
59234c
# https://fedoraproject.org/wiki/Packaging:ScriptletSnippets#Systemd
59234c
%triggerun -- httpd < 2.2.21-5
59234c
# Save the current service runlevel info
59234c
# User must manually run systemd-sysv-convert --apply httpd
59234c
# to migrate them to systemd targets
59234c
/usr/bin/systemd-sysv-convert --save httpd.service >/dev/null 2>&1 ||:
59234c
59234c
# Run these because the SysV package being removed won't do them
59234c
/sbin/chkconfig --del httpd >/dev/null 2>&1 || :
59234c
59234c
%posttrans
59234c
test -f /etc/sysconfig/httpd-disable-posttrans || \
59234c
  /bin/systemctl try-restart --no-block httpd.service htcacheclean.service >/dev/null 2>&1 || :
59234c
59234c
%check
59234c
# Check the built modules are all PIC
59234c
if readelf -d $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.so | grep TEXTREL; then
59234c
   : modules contain non-relocatable code
59234c
   exit 1
59234c
fi
59234c
set +x
59234c
rv=0
59234c
# Ensure every mod_* that's built is loaded.
59234c
for f in $RPM_BUILD_ROOT%{_libdir}/httpd/modules/*.so; do
59234c
  m=${f##*/}
59234c
  if ! grep -q $m $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.modules.d/*.conf; then
59234c
    echo ERROR: Module $m not configured.  Disable it, or load it.
59234c
    rv=1
59234c
  fi
59234c
done
59234c
# Ensure every loaded mod_* is actually built
59234c
mods=`grep -h ^LoadModule $RPM_BUILD_ROOT%{_sysconfdir}/httpd/conf.modules.d/*.conf | sed 's,.*modules/,,'`
59234c
for m in $mods; do
59234c
  f=$RPM_BUILD_ROOT%{_libdir}/httpd/modules/${m}
59234c
  if ! test -x $f; then
59234c
    echo ERROR: Module $m is configured but not built.
59234c
    rv=1
59234c
  fi
59234c
done
59234c
set -x
59234c
exit $rv
59234c
59234c
%clean
59234c
rm -rf $RPM_BUILD_ROOT
59234c
59234c
%files
59234c
%defattr(-,root,root)
59234c
59234c
%doc ABOUT_APACHE README CHANGES LICENSE VERSIONING NOTICE
59234c
%doc docs/conf/extra/*.conf
59234c
%doc instance.conf
59234c
59234c
%{_sysconfdir}/httpd/modules
59234c
%{_sysconfdir}/httpd/logs
59234c
%{_sysconfdir}/httpd/state
59234c
%{_sysconfdir}/httpd/run
59234c
%dir %{_sysconfdir}/httpd/conf
59234c
%config(noreplace) %{_sysconfdir}/httpd/conf/httpd.conf
59234c
%config(noreplace) %{_sysconfdir}/httpd/conf/magic
59234c
59234c
%config(noreplace) %{_sysconfdir}/logrotate.d/httpd
59234c
59234c
%config(noreplace) %{_sysconfdir}/httpd/conf.d/*.conf
59234c
%exclude %{_sysconfdir}/httpd/conf.d/ssl.conf
59234c
%exclude %{_sysconfdir}/httpd/conf.d/manual.conf
59234c
59234c
%dir %{_sysconfdir}/httpd/conf.modules.d
59234c
%{_sysconfdir}/httpd/conf.modules.d/README
59234c
%config(noreplace) %{_sysconfdir}/httpd/conf.modules.d/*.conf
59234c
%exclude %{_sysconfdir}/httpd/conf.modules.d/00-ssl.conf
59234c
%exclude %{_sysconfdir}/httpd/conf.modules.d/00-proxyhtml.conf
59234c
%exclude %{_sysconfdir}/httpd/conf.modules.d/01-ldap.conf
59234c
%exclude %{_sysconfdir}/httpd/conf.modules.d/01-session.conf
59234c
%exclude %{_sysconfdir}/httpd/conf.modules.d/01-md.conf
59234c
59234c
%config(noreplace) %{_sysconfdir}/sysconfig/htcacheclean
59234c
%{_prefix}/lib/tmpfiles.d/httpd.conf
59234c
59234c
%dir %{_libexecdir}/initscripts/legacy-actions/httpd
59234c
%{_libexecdir}/initscripts/legacy-actions/httpd/*
59234c
59234c
%{_sbindir}/ht*
59234c
%{_sbindir}/fcgistarter
59234c
%{_sbindir}/apachectl
59234c
%{_sbindir}/rotatelogs
59234c
%caps(cap_setuid,cap_setgid+pe) %attr(510,root,%{suexec_caller}) %{_sbindir}/suexec
59234c
59234c
%dir %{_libdir}/httpd
59234c
%dir %{_libdir}/httpd/modules
59234c
%{_libdir}/httpd/modules/mod*.so
59234c
%exclude %{_libdir}/httpd/modules/mod_auth_form.so
59234c
%exclude %{_libdir}/httpd/modules/mod_ssl.so
59234c
%exclude %{_libdir}/httpd/modules/mod_md.so
59234c
%exclude %{_libdir}/httpd/modules/mod_*ldap.so
59234c
%exclude %{_libdir}/httpd/modules/mod_proxy_html.so
59234c
%exclude %{_libdir}/httpd/modules/mod_xml2enc.so
59234c
%exclude %{_libdir}/httpd/modules/mod_session*.so
59234c
59234c
%dir %{contentdir}/error
59234c
%dir %{contentdir}/error/include
59234c
%dir %{contentdir}/noindex
59234c
%{contentdir}/icons/*
59234c
%{contentdir}/error/README
59234c
%{contentdir}/error/*.var
59234c
%{contentdir}/error/include/*.html
59234c
%{contentdir}/noindex/index.html
59234c
59234c
%attr(0710,root,apache) %dir /run/httpd
59234c
%attr(0700,apache,apache) %dir /run/httpd/htcacheclean
59234c
%attr(0700,root,root) %dir %{_localstatedir}/log/httpd
59234c
%attr(0700,apache,apache) %dir %{_localstatedir}/lib/dav
59234c
%attr(0700,apache,apache) %dir %{_localstatedir}/lib/httpd
59234c
%attr(0700,apache,apache) %dir %{_localstatedir}/cache/httpd
59234c
%attr(0700,apache,apache) %dir %{_localstatedir}/cache/httpd/proxy
59234c
59234c
%{_mandir}/man8/*
59234c
%{_mandir}/man5/*
59234c
%exclude %{_mandir}/man8/httpd-init.*
59234c
59234c
%{_unitdir}/httpd.service
59234c
%{_unitdir}/httpd@.service
59234c
%{_unitdir}/htcacheclean.service
59234c
%{_unitdir}/*.socket
59234c
59234c
%files filesystem
59234c
%dir %{_sysconfdir}/httpd
59234c
%dir %{_sysconfdir}/httpd/conf.d
59234c
%{_sysconfdir}/httpd/conf.d/README
59234c
%dir %{docroot}
59234c
%dir %{docroot}/cgi-bin
59234c
%dir %{docroot}/html
59234c
%dir %{contentdir}
59234c
%dir %{contentdir}/icons
59234c
%attr(755,root,root) %dir %{_unitdir}/httpd.service.d
59234c
%attr(755,root,root) %dir %{_unitdir}/httpd.socket.d
59234c
59234c
%files tools
59234c
%defattr(-,root,root)
59234c
%{_bindir}/*
59234c
%{_mandir}/man1/*
59234c
%doc LICENSE NOTICE
59234c
%exclude %{_bindir}/apxs
59234c
%exclude %{_mandir}/man1/apxs.1*
59234c
59234c
%files manual
59234c
%defattr(-,root,root)
59234c
%{contentdir}/manual
59234c
%config(noreplace) %{_sysconfdir}/httpd/conf.d/manual.conf
59234c
59234c
%files -n mod_ssl
59234c
%defattr(-,root,root)
59234c
%{_libdir}/httpd/modules/mod_ssl.so
59234c
%config(noreplace) %{_sysconfdir}/httpd/conf.modules.d/00-ssl.conf
59234c
%config(noreplace) %{_sysconfdir}/httpd/conf.d/ssl.conf
59234c
%attr(0700,apache,root) %dir %{_localstatedir}/cache/httpd/ssl
59234c
%{_unitdir}/httpd-init.service
59234c
%{_libexecdir}/httpd-ssl-pass-dialog
59234c
%{_libexecdir}/httpd-ssl-gencerts
59234c
%{_unitdir}/httpd.socket.d/10-listen443.conf
59234c
%{_mandir}/man8/httpd-init.*
59234c
59234c
%files -n mod_proxy_html
59234c
%defattr(-,root,root)
59234c
%{_libdir}/httpd/modules/mod_proxy_html.so
59234c
%{_libdir}/httpd/modules/mod_xml2enc.so
59234c
%config(noreplace) %{_sysconfdir}/httpd/conf.modules.d/00-proxyhtml.conf
59234c
59234c
%files -n mod_ldap
59234c
%defattr(-,root,root)
59234c
%{_libdir}/httpd/modules/mod_*ldap.so
59234c
%config(noreplace) %{_sysconfdir}/httpd/conf.modules.d/01-ldap.conf
59234c
59234c
%files -n mod_session
59234c
%defattr(-,root,root)
59234c
%{_libdir}/httpd/modules/mod_session*.so
59234c
%{_libdir}/httpd/modules/mod_auth_form.so
59234c
%config(noreplace) %{_sysconfdir}/httpd/conf.modules.d/01-session.conf
59234c
59234c
%files -n mod_md
59234c
%defattr(-,root,root)
59234c
%{_libdir}/httpd/modules/mod_md.so
59234c
%config(noreplace) %{_sysconfdir}/httpd/conf.modules.d/01-md.conf
59234c
59234c
%files devel
59234c
%defattr(-,root,root)
59234c
%{_includedir}/httpd
59234c
%{_bindir}/apxs
59234c
%{_mandir}/man1/apxs.1*
59234c
%dir %{_libdir}/httpd/build
59234c
%{_libdir}/httpd/build/*.mk
59234c
%{_libdir}/httpd/build/*.sh
59234c
%{_rpmconfigdir}/macros.d/macros.httpd
59234c
59234c
%changelog
59234c
* Tue Dec 11 2018 Joe Orton <jorton@redhat.com> - 2.4.37-7
59234c
- add DefaultStateDir/ap_state_dir_relative() (#1653009)
59234c
- mod_dav_fs: use state dir for default DAVLockDB
59234c
- mod_md: use state dir for default MDStoreDir
59234c
59234c
* Mon Dec 10 2018 Joe Orton <jorton@redhat.com> - 2.4.37-6
59234c
- add httpd.conf(5) (#1611361)
59234c
59234c
* Mon Nov 26 2018 Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-5
59234c
- Resolves: #1652966 - Missing RELEASE in http header
59234c
59234c
* Fri Nov 23 2018 Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-4
59234c
- Resolves: #1641951 - No Documentation= line in htcacheclean.service files
59234c
59234c
* Fri Nov 23 2018 Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-3
59234c
- Resolves: #1643713 - TLS connection allowed while all protocols are forbidden
59234c
59234c
* Thu Nov 22 2018 Joe Orton <jorton@redhat.com> - 2.4.37-2
59234c
- mod_ssl: fix off-by-one causing crashes in CGI children (#1649428)
59234c
59234c
* Wed Nov 21 2018 Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-1
59234c
- Resolves: #1644625 - httpd rebase to 2.4.37
59234c
59234c
* Thu Oct 18 2018 Luboš Uhliarik <luhliari@redhat.com> - 2.4.35-10
59234c
- Related: #1493510 - RFE: httpd, add IP_FREEBIND support for Listen
59234c
59234c
* Tue Oct 16 2018 Lubos Uhliarik <luhliari@redhat.com> - 2.4.35-9
59234c
- mod_ssl: allow sending multiple CA names which differ only in case
59234c
59234c
* Tue Oct 16 2018 Joe Orton <jorton@redhat.com> - 2.4.35-7
59234c
- mod_ssl: drop SSLRandomSeed from default config (#1638730)
59234c
- mod_ssl: follow OpenSSL protocol defaults if SSLProtocol
59234c
     is not configured (Rob Crittenden, #1638738)
59234c
59234c
* Mon Oct 15 2018 Joe Orton <jorton@redhat.com> - 2.4.35-5
59234c
- mod_ssl: don't require SSLCryptoDevice to be set for PKCS#11 cert
59234c
59234c
* Mon Oct 15 2018 Lubos Uhliarik <luhliari@redhat.com> - 2.4.35-4
59234c
- Resolves: #1635681 - sync with Fedora 28/29 httpd
59234c
- comment-out SSLProtocol, SSLProxyProtocol from ssl.conf in default
59234c
  configuration; now follow OpenSSL system default (#1468322)
59234c
- dropped NPN support
59234c
- mod_md: change hard-coded default MdStoreDir to state/md (#1563846)
59234c
- don't block on service try-restart in posttrans scriptlet
59234c
- build and load mod_brotli
59234c
- mod_systemd: show bound ports in status and log to journal
59234c
  at startup
59234c
- updated httpd.service.xml man page
59234c
- tweak wording in privkey passphrase prompt
59234c
- drop sslmultiproxy patch
59234c
- apachectl: don't read /etc/sysconfig/httpd
59234c
- drop irrelevant Obsoletes for devel subpackage
59234c
- move instantiated httpd@.service to main httpd package
59234c
59234c
* Mon Oct 15 2018 Lubos Uhliarik <luhliari@redhat.com> - 2.4.35-3
59234c
- Resolves: #1602548 - various covscan fixes
59234c
59234c
* Thu Sep 27 2018 Lubos Uhliarik <luhliari@redhat.com> - 2.4.35-2
59234c
- apache httpd can work with TLS 1.3 (#1617997)
59234c
- drop SSLv3 support patch
59234c
59234c
* Thu Sep 27 2018 Lubos Uhliarik <luhliari@redhat.com> - 2.4.35-1
59234c
- new version 2.4.35 (#1632754)
59234c
59234c
* Mon Sep 03 2018 Lubos Uhliarik <luhliari@redhat.com> - 2.4.33-4
59234c
- mod_ssl: enable SSLv3 and change behavior of "SSLProtocol All" 
59234c
  configuration (#1622630)
59234c
59234c
* Thu Jul 26 2018 Joe Orton <jorton@redhat.com> - 2.4.33-3
59234c
- mod_ssl: add PKCS#11 cert/key support (Anderson Sasaki, #1527084)
59234c
59234c
* Mon Apr 30 2018 Luboš Uhliarik <luhliari@redhat.com> - 2.4.33-2
59234c
- new version 2.4.33
59234c
- add mod_md subpackage; load mod_proxy_uwsgi by default
59234c
59234c
* Mon Apr 30 2018 Joe Orton <jorton@redhat.com> - 2.4.28-8
59234c
- remove %%ghosted /etc/sysconfig/httpd (#1572676)
59234c
59234c
* Wed Mar 07 2018 Luboš Uhliarik <luhliari@redhat.com> - 2.4.28-2
59234c
- Resolves: #1512563 - httpd: update welcome page branding
59234c
- Resolves: #1511123 - RFE: httpd use event MPM by default
59234c
- Resolves: #1493510 - RFE: httpd, add IP_FREEBIND support for Listen
59234c
59234c
* Fri Oct 06 2017 Luboš Uhliarik <luhliari@redhat.com> - 2.4.28-1
59234c
- new version 2.4.28
59234c
59234c
* Tue Oct  3 2017 Joe Orton <jorton@redhat.com> - 2.4.27-14
59234c
- add notes on enabling httpd_graceful_shutdown boolean for prefork
59234c
59234c
* Fri Sep 22 2017 Joe Orton <jorton@redhat.com> - 2.4.27-13
59234c
- drop Requires(post) for mod_ssl
59234c
59234c
* Fri Sep 22 2017 Joe Orton <jorton@redhat.com> - 2.4.27-12
59234c
- better error handling in httpd-ssl-gencerts (#1494556)
59234c
59234c
* Thu Sep 21 2017 Stephen Gallagher <sgallagh@redhat.com> - 2.4.27-11
59234c
- Require sscg 2.2.0 for creating service and CA certificates together
59234c
59234c
* Thu Sep 21 2017 Jeroen van Meeuwen <kanarip@fedoraproject.org> - 2.4.27-10
59234c
- Address CVE-2017-9798 by applying patch from upstream (#1490344)
59234c
59234c
* Thu Sep 21 2017 Joe Orton <jorton@redhat.com> - 2.4.27-9
59234c
- use sscg defaults; append CA cert to generated cert
59234c
- document httpd-init.service in httpd-init.service(8)
59234c
59234c
* Thu Sep 21 2017 Jeroen van Meeuwen <kanarip@fedoraproject.org> - 2.4.27-8
59234c
- Address CVE-2017-9798 by applying patch from upstream (#1490344)
59234c
59234c
* Wed Sep 20 2017 Stephen Gallagher <sgallagh@redhat.com> - 2.4.27-8.1
59234c
- Generate SSL certificates on service start, not %%posttrans
59234c
59234c
* Tue Sep 19 2017 Joe Orton <jorton@redhat.com> - 2.4.27-8.1
59234c
- move httpd.service.d, httpd.socket.d dirs to -filesystem
59234c
59234c
* Wed Sep 13 2017 Joe Orton <jorton@redhat.com> - 2.4.27-7
59234c
- add new content-length filter (upstream PR 61222)
59234c
59234c
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.27-6
59234c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
59234c
59234c
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.27-5
59234c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
59234c
59234c
* Tue Jul 18 2017 Joe Orton <jorton@redhat.com> - 2.4.27-4
59234c
- update mod_systemd (r1802251)
59234c
59234c
* Mon Jul 17 2017 Joe Orton <jorton@redhat.com> - 2.4.27-3
59234c
- switch to event by default for Fedora 27 and later (#1471708)
59234c
59234c
* Wed Jul 12 2017 Luboš Uhliarik <luhliari@redhat.com> - 2.4.27-2
59234c
- Resolves: #1469959 - httpd update cleaned out /etc/sysconfig
59234c
59234c
* Mon Jul 10 2017 Luboš Uhliarik <luhliari@redhat.com> - 2.4.27-1
59234c
- new version 2.4.27
59234c
59234c
* Fri Jun 30 2017 Joe Orton <jorton@redhat.com> - 2.4.26-2
59234c
- mod_proxy_fcgi: fix further regressions (PR 61202)
59234c
59234c
* Mon Jun 19 2017 Luboš Uhliarik <luhliari@redhat.com> - 2.4.26-1
59234c
- new version 2.4.26
59234c
59234c
* Mon Jun  5 2017 Joe Orton <jorton@redhat.com> - 2.4.25-10
59234c
- move unit man pages to section 8, add as Documentation= in units
59234c
59234c
* Fri May 19 2017 Joe Orton <jorton@redhat.com> - 2.4.25-9
59234c
- add httpd.service(5) and httpd.socket(5) man pages
59234c
59234c
* Tue May 16 2017 Joe Orton <jorton@redhat.com> - 2.4.25-8
59234c
- require mod_http2, now packaged separately
59234c
59234c
* Wed Mar 29 2017 Luboš Uhliarik <luhliari@redhat.com> - 2.4.25-7
59234c
- Resolves: #1397243 - Backport Apache Bug 53098 - mod_proxy_ajp:
59234c
  patch to set worker secret passed to tomcat
59234c
59234c
* Tue Mar 28 2017 Luboš Uhliarik <luhliari@redhat.com> - 2.4.25-6
59234c
- Resolves: #1434916 - httpd.service: Failed with result timeout
59234c
59234c
* Fri Mar 24 2017 Joe Orton <jorton@redhat.com> - 2.4.25-5
59234c
- link only httpd, not support/* against -lselinux -lsystemd
59234c
59234c
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.25-4
59234c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
59234c
59234c
* Thu Jan 12 2017 Joe Orton <jorton@redhat.com> - 2.4.25-3
59234c
- mod_watchdog: restrict thread lifetime (#1410883)
59234c
59234c
* Thu Dec 22 2016 Luboš Uhliarik <luhliari@redhat.com> - 2.4.25-2
59234c
- Resolves: #1358875 - require nghttp2 >= 1.5.0
59234c
59234c
* Thu Dec 22 2016 Luboš Uhliarik <luhliari@redhat.com> - 2.4.25-1
59234c
- new version 2.4.25
59234c
59234c
* Mon Dec 05 2016 Luboš Uhliarik <luhliari@redhat.com> - 2.4.23-7
59234c
- Resolves: #1401530 - CVE-2016-8740 httpd: Incomplete handling of
59234c
  LimitRequestFields directive in mod_http2
59234c
59234c
* Mon Nov 14 2016 Joe Orton <jorton@redhat.com> - 2.4.23-6
59234c
- fix build with OpenSSL 1.1 (#1392900)
59234c
- fix typos in ssl.conf (josef randinger, #1379407)
59234c
59234c
* Wed Nov  2 2016 Joe Orton <jorton@redhat.com> - 2.4.23-5
59234c
- no longer package /etc/sysconfig/httpd
59234c
- synch ssl.conf with upstream
59234c
59234c
* Mon Jul 18 2016 Joe Orton <jorton@redhat.com> - 2.4.23-4
59234c
- add security fix for CVE-2016-5387
59234c
59234c
* Thu Jul  7 2016 Joe Orton <jorton@redhat.com> - 2.4.23-3
59234c
- load mod_watchdog by default (#1353582)
59234c
59234c
* Thu Jul  7 2016 Joe Orton <jorton@redhat.com> - 2.4.23-2
59234c
- restore build of mod_proxy_fdpass (#1325883)
59234c
- improve check tests to catch configured-but-not-built modules
59234c
59234c
* Thu Jul  7 2016 Joe Orton <jorton@redhat.com> - 2.4.23-1
59234c
- update to 2.4.23 (#1325883, #1353203)
59234c
- load mod_proxy_hcheck
59234c
- recommend use of "systemctl edit" in httpd.service
59234c
59234c
* Thu Apr  7 2016 Joe Orton <jorton@redhat.com> - 2.4.18-6
59234c
- have "apachectl graceful" start httpd if not running, per man page
59234c
59234c
* Wed Apr  6 2016 Joe Orton <jorton@redhat.com> - 2.4.18-5
59234c
- use redirects for lang-specific /manual/ URLs
59234c
59234c
* Fri Mar 18 2016 Joe Orton <jorton@redhat.com> - 2.4.18-4
59234c
- fix welcome page HTML validity (Ville Skyttä)
59234c
59234c
* Fri Mar 18 2016 Joe Orton <jorton@redhat.com> - 2.4.18-3
59234c
- remove httpd pre script (duplicate of httpd-filesystem's)
59234c
- in httpd-filesystem pre script, create group/user iff non-existent
59234c
59234c
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.18-2
59234c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
59234c
59234c
* Mon Dec 14 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.18-1
59234c
- update to new version 2.4.18
59234c
59234c
* Wed Dec  9 2015 Joe Orton <jorton@redhat.com> - 2.4.17-4
59234c
- re-enable mod_asis due to popular demand (#1284315)
59234c
59234c
* Mon Oct 26 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.17-3
59234c
- fix crash when using -X argument (#1272234)
59234c
59234c
* Wed Oct 14 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.17-2
59234c
- rebase socket activation patch to 2.4.17
59234c
59234c
* Tue Oct 13 2015 Joe Orton <jorton@redhat.com> - 2.4.17-1
59234c
- update to 2.4.17 (#1271224)
59234c
- build, load mod_http2
59234c
- don't build mod_asis, mod_file_cache
59234c
- load mod_cache_socache, mod_proxy_wstunnel by default
59234c
- check every built mod_* is configured
59234c
- synch ssl.conf with upstream; disable SSLv3 by default
59234c
59234c
* Wed Jul 15 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.12-4
59234c
- update to 2.4.16
59234c
59234c
* Tue Jul  7 2015 Joe Orton <jorton@redhat.com> - 2.4.12-3
59234c
- mod_ssl: use "localhost" in the dummy SSL cert if len(FQDN) > 59 chars
59234c
59234c
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.12-2
59234c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
59234c
59234c
* Fri Mar 27 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.12-1
59234c
- update to 2.4.12
59234c
59234c
* Tue Mar 24 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.10-17
59234c
- fix compilation with lua-5.3
59234c
59234c
* Tue Mar 24 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.10-16
59234c
- remove filter for auto-provides of httpd modules, it is not needed since F20
59234c
59234c
* Wed Dec 17 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.10-15
59234c
- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
59234c
- mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)
59234c
- mod_proxy_fcgi: fix a potential crash with long headers (CVE-2014-3583)
59234c
- mod_lua: fix handling of the Require line when a LuaAuthzProvider is used
59234c
  in multiple Require directives with different arguments (CVE-2014-8109)
59234c
59234c
* Tue Oct 14 2014 Joe Orton <jorton@redhat.com> - 2.4.10-14
59234c
- require apr-util 1.5.x
59234c
59234c
* Thu Sep 18 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.10-13
59234c
- use NoDelay and DeferAcceptSec in httpd.socket
59234c
59234c
* Mon Sep 08 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.10-12
59234c
- increase suexec minimum acceptable uid/gid to 1000 (#1136391)
59234c
59234c
* Wed Sep 03 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.10-11
59234c
- fix hostname requirement and conflict with openssl-libs
59234c
59234c
* Mon Sep 01 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.10-10
59234c
- use KillMode=mixed in httpd.service (#1135122)
59234c
59234c
* Fri Aug 29 2014 Joe Orton <jorton@redhat.com> - 2.4.10-9
59234c
- set vstring based on /etc/os-release (Pat Riehecky, #1114539)
59234c
59234c
* Fri Aug 29 2014 Joe Orton <jorton@redhat.com> - 2.4.10-8
59234c
- pull in httpd-filesystem as Requires(pre) (#1128328)
59234c
- fix cipher selection in default ssl.conf, depend on new OpenSSL (#1134348)
59234c
- require hostname for mod_ssl post script (#1135118)
59234c
59234c
* Fri Aug 22 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.10-7
59234c
- mod_systemd: updated to the latest version
59234c
- use -lsystemd instead of -lsystemd-daemon (#1125084)
59234c
- fix possible crash in SIGINT handling (#958934)
59234c
59234c
* Thu Aug 21 2014 Joe Orton <jorton@redhat.com> - 2.4.10-6
59234c
- mod_ssl: treat "SSLCipherSuite PROFILE=..." as special (#1109119)
59234c
- switch default ssl.conf to use PROFILE=SYSTEM (#1109119)
59234c
59234c
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.10-5
59234c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
59234c
59234c
* Fri Aug 15 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.10-4
59234c
- add /usr/bin/useradd dependency to -filesystem requires
59234c
59234c
* Thu Aug 14 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.10-3
59234c
- fix creating apache user in pre script (#1128328)
59234c
59234c
* Thu Jul 31 2014 Joe Orton <jorton@redhat.com> - 2.4.10-2
59234c
- enable mod_request by default for mod_auth_form
59234c
- move disabled-by-default modules from 00-base.conf to 00-optional.conf
59234c
59234c
* Mon Jul 21 2014 Joe Orton <jorton@redhat.com> - 2.4.10-1
59234c
- update to 2.4.10
59234c
- expand variables in docdir example configs
59234c
59234c
* Tue Jul 08 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.9-8
59234c
- add support for systemd socket activation (#1111648)
59234c
59234c
* Mon Jul 07 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.9-7
59234c
- remove conf.modules.d from httpd-filesystem subpackage (#1081453)
59234c
59234c
* Mon Jul 07 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.9-6
59234c
- add httpd-filesystem subpackage (#1081453)
59234c
59234c
* Fri Jun 20 2014 Joe Orton <jorton@redhat.com> - 2.4.9-5
59234c
- mod_ssl: don't use the default OpenSSL cipher suite in ssl.conf (#1109119)
59234c
59234c
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.9-4
59234c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
59234c
59234c
* Fri Mar 28 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.9-3
59234c
- add support for SetHandler + proxy (#1078970)
59234c
59234c
* Thu Mar 27 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.9-2
59234c
- move macros from /etc/rpm to macros.d (#1074277)
59234c
- remove unused patches
59234c
59234c
* Mon Mar 17 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.9-1
59234c
- update to 2.4.9
59234c
59234c
* Fri Feb 28 2014 Joe Orton <jorton@redhat.com> - 2.4.7-6
59234c
- use 2048-bit RSA key with SHA-256 signature in dummy certificate
59234c
59234c
* Fri Feb 28 2014 Stephen Gallagher <sgallagh@redhat.com> 2.4.7-5
59234c
- Create drop directory for systemd snippets
59234c
59234c
* Thu Feb 27 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.7-4
59234c
- remove provides of old MMN, because it contained double-dash (#1068851)
59234c
59234c
* Thu Feb 20 2014 Jan Kaluza <jkaluza@redhat.com> - 2.4.7-3
59234c
- fix graceful restart using legacy actions
59234c
59234c
* Thu Dec 12 2013 Joe Orton <jorton@redhat.com> - 2.4.7-2
59234c
- conflict with pre-1.5.0 APR
59234c
- fix sslsninotreq patch
59234c
59234c
* Wed Nov 27 2013 Joe Orton <jorton@redhat.com> - 2.4.7-1
59234c
- update to 2.4.7 (#1034071)
59234c
59234c
* Fri Nov 22 2013 Joe Orton <jorton@redhat.com> - 2.4.6-10
59234c
- switch to requiring system-logos-httpd (#1031288)
59234c
59234c
* Tue Nov 12 2013 Joe Orton <jorton@redhat.com> - 2.4.6-9
59234c
- change mmnisa to drop "-" altogether
59234c
59234c
* Tue Nov 12 2013 Joe Orton <jorton@redhat.com> - 2.4.6-8
59234c
- drop ambiguous invalid "-" in RHS of httpd-mmn Provide, keeping old Provide
59234c
  for transition
59234c
59234c
* Fri Nov  1 2013 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-7
59234c
- systemd: use {MAINPID} notation to ensure /bin/kill has always the second arg
59234c
59234c
* Thu Oct 31 2013 Joe Orton <jorton@redhat.com> - 2.4.6-6
59234c
- mod_ssl: allow SSLEngine to override Listen-based default (r1537535)
59234c
59234c
* Thu Oct 24 2013 Jan kaluza <jkaluza@redhat.com> - 2.4.6-5
59234c
- systemd: send SIGWINCH signal without httpd -k in ExecStop
59234c
59234c
* Mon Oct 21 2013 Joe Orton <jorton@redhat.com> - 2.4.6-4
59234c
- load mod_macro by default (#998452)
59234c
- add README to conf.modules.d
59234c
- mod_proxy_http: add possible fix for threading issues (r1534321)
59234c
- core: add fix for truncated output with CGI scripts (r1530793)
59234c
59234c
* Thu Oct 10 2013 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-3
59234c
- require fedora-logos-httpd (#1009162)
59234c
59234c
* Wed Jul 31 2013 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-2
59234c
- revert fix for dumping vhosts twice
59234c
59234c
* Mon Jul 22 2013 Joe Orton <jorton@redhat.com> - 2.4.6-1
59234c
- update to 2.4.6
59234c
- mod_ssl: use revised NPN API (r1487772)
59234c
59234c
* Thu Jul 11 2013 Jan Kaluza <jkaluza@redhat.com> - 2.4.4-12
59234c
- mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
59234c
- apxs: mention -p option in manpage
59234c
59234c
* Tue Jul  2 2013 Joe Orton <jorton@redhat.com> - 2.4.4-11
59234c
- add patch for aarch64 (Dennis Gilmore, #925558)
59234c
59234c
* Mon Jul  1 2013 Joe Orton <jorton@redhat.com> - 2.4.4-10
59234c
- remove duplicate apxs man page from httpd-tools
59234c
59234c
* Mon Jun 17 2013 Joe Orton <jorton@redhat.com> - 2.4.4-9
59234c
- remove zombie dbmmanage script
59234c
59234c
* Fri May 31 2013 Jan Kaluza <jkaluza@redhat.com> - 2.4.4-8
59234c
- return 400 Bad Request on malformed Host header
59234c
59234c
* Fri May 24 2013 Jan Kaluza <jkaluza@redhat.com> - 2.4.4-7
59234c
- ignore /etc/sysconfig/httpd and document systemd way of setting env variables
59234c
  in this file
59234c
59234c
* Mon May 20 2013 Jan Kaluza <jkaluza@redhat.com> - 2.4.4-6
59234c
- htpasswd/htdbm: fix hash generation bug (#956344)
59234c
- do not dump vhosts twice in httpd -S output (#928761)
59234c
- mod_cache: fix potential crash caused by uninitialized variable (#954109)
59234c
59234c
* Thu Apr 18 2013 Jan Kaluza <jkaluza@redhat.com> - 2.4.4-5
59234c
- execute systemctl reload as result of apachectl graceful
59234c
- mod_ssl: ignore SNI hints unless required by config
59234c
- mod_cache: forward-port CacheMaxExpire "hard" option
59234c
- mod_ssl: fall back on another module's proxy hook if mod_ssl proxy
59234c
  is not configured.
59234c
59234c
* Tue Apr 16 2013 Jan Kaluza <jkaluza@redhat.com> - 2.4.4-4
59234c
- fix service file to not send SIGTERM after ExecStop (#906321, #912288)
59234c
59234c
* Tue Mar 26 2013 Jan Kaluza <jkaluza@redhat.com> - 2.4.4-3
59234c
- protect MIMEMagicFile with IfModule (#893949)
59234c
59234c
* Tue Feb 26 2013 Joe Orton <jorton@redhat.com> - 2.4.4-2
59234c
- really package mod_auth_form in mod_session (#915438)
59234c
59234c
* Tue Feb 26 2013 Joe Orton <jorton@redhat.com> - 2.4.4-1
59234c
- update to 2.4.4
59234c
- fix duplicate ownership of mod_session config (#914901)
59234c
59234c
* Fri Feb 22 2013 Joe Orton <jorton@redhat.com> - 2.4.3-17
59234c
- add mod_session subpackage, move mod_auth_form there (#894500)
59234c
59234c
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.3-16
59234c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
59234c
59234c
* Tue Jan  8 2013 Joe Orton <jorton@redhat.com> - 2.4.3-15
59234c
- add systemd service for htcacheclean
59234c
59234c
* Tue Nov 13 2012 Joe Orton <jorton@redhat.com> - 2.4.3-14
59234c
- drop patch for r1344712
59234c
59234c
* Tue Nov 13 2012 Joe Orton <jorton@redhat.com> - 2.4.3-13
59234c
- filter mod_*.so auto-provides (thanks to rcollet)
59234c
- pull in syslog logging fix from upstream (r1344712)
59234c
59234c
* Fri Oct 26 2012 Joe Orton <jorton@redhat.com> - 2.4.3-12
59234c
- rebuild to pick up new apr-util-ldap
59234c
59234c
* Tue Oct 23 2012 Joe Orton <jorton@redhat.com> - 2.4.3-11
59234c
- rebuild
59234c
59234c
* Wed Oct  3 2012 Joe Orton <jorton@redhat.com> - 2.4.3-10
59234c
- pull upstream patch r1392850 in addition to r1387633
59234c
59234c
* Mon Oct  1 2012 Joe Orton <jorton@redhat.com> - 2.4.3-9
59234c
- define PLATFORM in os.h using vendor string
59234c
59234c
* Mon Oct  1 2012 Joe Orton <jorton@redhat.com> - 2.4.3-8
59234c
- use systemd script unconditionally (#850149)
59234c
59234c
* Mon Oct  1 2012 Joe Orton <jorton@redhat.com> - 2.4.3-7
59234c
- use systemd scriptlets if available (#850149)
59234c
- don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists
59234c
59234c
* Mon Oct 01 2012 Jan Kaluza <jkaluza@redhat.com> - 2.4.3-6
59234c
- use systemctl from apachectl (#842736)
59234c
59234c
* Wed Sep 19 2012 Joe Orton <jorton@redhat.com> - 2.4.3-5
59234c
- fix some error log spam with graceful-stop (r1387633)
59234c
- minor mod_systemd tweaks
59234c
59234c
* Thu Sep 13 2012 Joe Orton <jorton@redhat.com> - 2.4.3-4
59234c
- use IncludeOptional for conf.d/*.conf inclusion
59234c
59234c
* Fri Sep 07 2012 Jan Kaluza <jkaluza@redhat.com> - 2.4.3-3
59234c
- adding mod_systemd to integrate with systemd better
59234c
59234c
* Tue Aug 21 2012 Joe Orton <jorton@redhat.com> - 2.4.3-2
59234c
- mod_ssl: add check for proxy keypair match (upstream r1374214)
59234c
59234c
* Tue Aug 21 2012 Joe Orton <jorton@redhat.com> - 2.4.3-1
59234c
- update to 2.4.3 (#849883)
59234c
- own the docroot (#848121)
59234c
59234c
* Mon Aug  6 2012 Joe Orton <jorton@redhat.com> - 2.4.2-23
59234c
- add mod_proxy fixes from upstream (r1366693, r1365604)
59234c
59234c
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.4.2-22
59234c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
59234c
59234c
* Fri Jul  6 2012 Joe Orton <jorton@redhat.com> - 2.4.2-21
59234c
- drop explicit version requirement on initscripts
59234c
59234c
* Thu Jul  5 2012 Joe Orton <jorton@redhat.com> - 2.4.2-20
59234c
- mod_ext_filter: fix error_log warnings
59234c
59234c
* Mon Jul  2 2012 Joe Orton <jorton@redhat.com> - 2.4.2-19
59234c
- support "configtest" and "graceful" as initscripts "legacy actions"
59234c
59234c
* Fri Jun  8 2012 Joe Orton <jorton@redhat.com> - 2.4.2-18
59234c
- avoid use of "core" GIF for a "core" directory (#168776)
59234c
- drop use of "syslog.target" in systemd unit file
59234c
59234c
* Thu Jun  7 2012 Joe Orton <jorton@redhat.com> - 2.4.2-17
59234c
- use _unitdir for systemd unit file
59234c
- use /run in unit file, ssl.conf
59234c
59234c
* Thu Jun  7 2012 Joe Orton <jorton@redhat.com> - 2.4.2-16
59234c
- mod_ssl: fix NPN patch merge
59234c
59234c
* Wed Jun  6 2012 Joe Orton <jorton@redhat.com> - 2.4.2-15
59234c
- move tmpfiles.d fragment into /usr/lib per new guidelines
59234c
- package /run/httpd not /var/run/httpd
59234c
- set runtimedir to /run/httpd likewise
59234c
59234c
* Wed Jun  6 2012 Joe Orton <jorton@redhat.com> - 2.4.2-14
59234c
- fix htdbm/htpasswd crash on crypt() failure (#818684)
59234c
59234c
* Wed Jun  6 2012 Joe Orton <jorton@redhat.com> - 2.4.2-13
59234c
- pull fix for NPN patch from upstream (r1345599)
59234c
59234c
* Thu May 31 2012 Joe Orton <jorton@redhat.com> - 2.4.2-12
59234c
- update suexec patch to use LOG_AUTHPRIV facility
59234c
59234c
* Thu May 24 2012 Joe Orton <jorton@redhat.com> - 2.4.2-11
59234c
- really fix autoindex.conf (thanks to remi@)
59234c
59234c
* Thu May 24 2012 Joe Orton <jorton@redhat.com> - 2.4.2-10
59234c
- fix autoindex.conf to allow symlink to poweredby.png
59234c
59234c
* Wed May 23 2012 Joe Orton <jorton@redhat.com> - 2.4.2-9
59234c
- suexec: use upstream version of patch for capability bit support
59234c
59234c
* Wed May 23 2012 Joe Orton <jorton@redhat.com> - 2.4.2-8
59234c
- suexec: use syslog rather than suexec.log, drop dac_override capability
59234c
59234c
* Tue May  1 2012 Joe Orton <jorton@redhat.com> - 2.4.2-7
59234c
- mod_ssl: add TLS NPN support (r1332643, #809599)
59234c
59234c
* Tue May  1 2012 Joe Orton <jorton@redhat.com> - 2.4.2-6
59234c
- add BR on APR >= 1.4.0
59234c
59234c
* Fri Apr 27 2012 Joe Orton <jorton@redhat.com> - 2.4.2-5
59234c
- use systemctl from logrotate (#221073)
59234c
59234c
* Fri Apr 27 2012 Joe Orton <jorton@redhat.com> - 2.4.2-4
59234c
- pull from upstream:
59234c
  * use TLS close_notify alert for dummy_connection (r1326980+)
59234c
  * cleanup symbol exports (r1327036+)
59234c
59234c
* Fri Apr 20 2012 Joe Orton <jorton@redhat.com> - 2.4.2-3
59234c
- really fix restart
59234c
59234c
* Fri Apr 20 2012 Joe Orton <jorton@redhat.com> - 2.4.2-2
59234c
- tweak default ssl.conf
59234c
- fix restart handling (#814645)
59234c
- use graceful restart by default
59234c
59234c
* Wed Apr 18 2012 Jan Kaluza <jkaluza@redhat.com> - 2.4.2-1
59234c
- update to 2.4.2
59234c
59234c
* Fri Mar 23 2012 Joe Orton <jorton@redhat.com> - 2.4.1-6
59234c
- fix macros
59234c
59234c
* Fri Mar 23 2012 Joe Orton <jorton@redhat.com> - 2.4.1-5
59234c
- add _httpd_moddir to macros
59234c
59234c
* Tue Mar 13 2012 Joe Orton <jorton@redhat.com> - 2.4.1-4
59234c
- fix symlink for poweredby.png
59234c
- fix manual.conf
59234c
59234c
* Tue Mar 13 2012 Joe Orton <jorton@redhat.com> - 2.4.1-3
59234c
- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc)
59234c
- move mod_ldap, mod_authnz_ldap to mod_ldap subpackage
59234c
59234c
* Tue Mar 13 2012 Joe Orton <jorton@redhat.com> - 2.4.1-2
59234c
- clean docroot better
59234c
- ship proxy, ssl directories within /var/cache/httpd
59234c
- default config:
59234c
 * unrestricted access to (only) /var/www
59234c
 * remove (commented) Mutex, MaxRanges, ScriptSock
59234c
 * split autoindex config to conf.d/autoindex.conf
59234c
- ship additional example configs in docdir
59234c
59234c
* Tue Mar  6 2012 Joe Orton <jorton@redhat.com> - 2.4.1-1
59234c
- update to 2.4.1
59234c
- adopt upstream default httpd.conf (almost verbatim)
59234c
- split all LoadModules to conf.modules.d/*.conf
59234c
- include conf.d/*.conf at end of httpd.conf
59234c
- trim %%changelog
59234c
59234c
* Mon Feb 13 2012 Joe Orton <jorton@redhat.com> - 2.2.22-2
59234c
- fix build against PCRE 8.30
59234c
59234c
* Mon Feb 13 2012 Joe Orton <jorton@redhat.com> - 2.2.22-1
59234c
- update to 2.2.22
59234c
59234c
* Fri Feb 10 2012 Petr Pisar <ppisar@redhat.com> - 2.2.21-8
59234c
- Rebuild against PCRE 8.30
59234c
59234c
* Mon Jan 23 2012 Jan Kaluza <jkaluza@redhat.com> - 2.2.21-7
59234c
- fix #783629 - start httpd after named
59234c
59234c
* Mon Jan 16 2012 Joe Orton <jorton@redhat.com> - 2.2.21-6
59234c
- complete conversion to systemd, drop init script (#770311)
59234c
- fix comments in /etc/sysconfig/httpd (#771024)
59234c
- enable PrivateTmp in service file (#781440)
59234c
- set LANG=C in /etc/sysconfig/httpd
59234c
59234c
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.21-5
59234c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
59234c
59234c
* Tue Dec 06 2011 Jan Kaluza <jkaluza@redhat.com> - 2.2.21-4
59234c
- fix #751591 - start httpd after remote-fs
59234c
59234c
* Mon Oct 24 2011 Jan Kaluza <jkaluza@redhat.com> - 2.2.21-3
59234c
- allow change state of BalancerMember in mod_proxy_balancer web interface
59234c
59234c
* Thu Sep 22 2011 Ville Skyttä <ville.skytta@iki.fi> - 2.2.21-2
59234c
- Make mmn available as %%{_httpd_mmn}.
59234c
- Add .svgz to AddEncoding x-gzip example in httpd.conf.
59234c
59234c
* Tue Sep 13 2011 Joe Orton <jorton@redhat.com> - 2.2.21-1
59234c
- update to 2.2.21
59234c
59234c
* Mon Sep  5 2011 Joe Orton <jorton@redhat.com> - 2.2.20-1
59234c
- update to 2.2.20
59234c
- fix MPM stub man page generation
59234c
59234c
* Wed Aug 10 2011 Jan Kaluza <jkaluza@redhat.com> - 2.2.19-5
59234c
- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd
59234c
59234c
* Fri Jul 22 2011 Iain Arnell <iarnell@gmail.com> 1:2.2.19-4
59234c
- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided
59234c
  directory names
59234c
59234c
* Wed Jul 20 2011 Jan Kaluza <jkaluza@redhat.com> - 2.2.19-3
59234c
- fix #716621 - suexec now works without setuid bit
59234c
59234c
* Thu Jul 14 2011 Jan Kaluza <jkaluza@redhat.com> - 2.2.19-2
59234c
- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve
59234c
59234c
* Fri Jul  1 2011 Joe Orton <jorton@redhat.com> - 2.2.19-1
59234c
- update to 2.2.19
59234c
- enable dbd, authn_dbd in default config
59234c
59234c
* Thu Apr 14 2011 Joe Orton <jorton@redhat.com> - 2.2.17-13
59234c
- fix path expansion in service files
59234c
59234c
* Tue Apr 12 2011 Joe Orton <jorton@redhat.com> - 2.2.17-12
59234c
- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)
59234c
59234c
* Wed Mar 23 2011 Joe Orton <jorton@redhat.com> - 2.2.17-11
59234c
- minor updates to httpd.conf
59234c
- drop old patches
59234c
59234c
* Wed Mar  2 2011 Joe Orton <jorton@redhat.com> - 2.2.17-10
59234c
- rebuild
59234c
59234c
* Wed Feb 23 2011 Joe Orton <jorton@redhat.com> - 2.2.17-9
59234c
- use arch-specific mmn
59234c
59234c
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.17-8
59234c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
59234c
59234c
* Mon Jan 31 2011 Joe Orton <jorton@redhat.com> - 2.2.17-7
59234c
- generate dummy mod_ssl cert with CA:FALSE constraint (#667841)
59234c
- add man page stubs for httpd.event, httpd.worker
59234c
- drop distcache support
59234c
- add STOP_TIMEOUT support to init script
59234c
59234c
* Sat Jan  8 2011 Joe Orton <jorton@redhat.com> - 2.2.17-6
59234c
- update default SSLCipherSuite per upstream trunk
59234c
59234c
* Wed Jan  5 2011 Joe Orton <jorton@redhat.com> - 2.2.17-5
59234c
- fix requires (#667397)
59234c
59234c
* Wed Jan  5 2011 Joe Orton <jorton@redhat.com> - 2.2.17-4
59234c
- de-ghost /var/run/httpd
59234c
59234c
* Tue Jan  4 2011 Joe Orton <jorton@redhat.com> - 2.2.17-3
59234c
- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)
59234c
59234c
* Sat Nov 20 2010 Joe Orton <jorton@redhat.com> - 2.2.17-2
59234c
- drop setuid bit, use capabilities for suexec binary
59234c
59234c
* Wed Oct 27 2010 Joe Orton <jorton@redhat.com> - 2.2.17-1
59234c
- update to 2.2.17
59234c
59234c
* Fri Sep 10 2010 Joe Orton <jorton@redhat.com> - 2.2.16-2
59234c
- link everything using -z relro and -z now
59234c
59234c
* Mon Jul 26 2010 Joe Orton <jorton@redhat.com> - 2.2.16-1
59234c
- update to 2.2.16
59234c
59234c
* Fri Jul  9 2010 Joe Orton <jorton@redhat.com> - 2.2.15-3
59234c
- default config tweaks:
59234c
 * harden httpd.conf w.r.t. .htaccess restriction (#591293)
59234c
 * load mod_substitute, mod_version by default
59234c
 * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf
59234c
 * add commented list of shipped-but-unloaded modules
59234c
 * bump up worker defaults a little
59234c
 * drop KeepAliveTimeout to 5 secs per upstream
59234c
- fix LSB compliance in init script (#522074)
59234c
- bundle NOTICE in -tools
59234c
- use init script in logrotate postrotate to pick up PIDFILE
59234c
- drop some old Obsoletes/Conflicts
59234c
59234c
* Sun Apr 04 2010 Robert Scheck <robert@fedoraproject.org> - 2.2.15-1
59234c
- update to 2.2.15 (#572404, #579311)
59234c